
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: e7l48n3wfYZ4znEv2ImgHKTfc9VknRhqXp88IweHCQY=
Subject key identifier: 6F:4D:A5:93:7C:D7:5D:53:67:0C:CC:3D:7F:9A:5C:A5:9F:53:70:65
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 01A0
Signing time: Thu 21 May 2026 04:16:06 +0000
Manifest this update: Thu 21 May 2026 04:16:05 +0000
Manifest next update: Thu 28 May 2026 04:16:05 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: 24wh4LAbUV1qOB5+tjTX7bWVYZ4I6ju9yiMGtaOgTwY=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: vWnJyVtLSPDbnLnMtUfpOpsMizJZ3OX7bmaYpD3gaL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: May 21 04:16:05 2026 GMT
Not After : May 28 04:16:05 2026 GMT
Subject: CN=6a0e8706-1eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:fd:9e:21:6a:b9:84:bd:1c:6b:f6:1a:91:
59:30:07:1b:fb:9c:d4:60:ee:bb:6f:2a:00:c8:38:
d2:87:2d:41:a0:67:d0:e9:61:f0:aa:e9:ae:75:04:
90:ae:3d:1c:25:dd:3c:dc:ab:87:ae:c3:70:3e:d2:
68:f7:b7:92:85:1f:ad:66:c3:cc:5c:a1:50:d7:b7:
55:e4:c2:11:a0:05:fd:96:f9:79:d4:f9:7f:52:b4:
84:88:d1:05:1d:23:b2:9d:41:84:21:3f:de:36:50:
ce:ad:cd:fe:bf:bf:0f:3c:9c:4d:eb:5e:f6:83:cf:
df:9e:fc:e9:99:a4:06:15:9d:3d:50:69:17:d1:be:
1a:6b:94:22:6e:1e:29:2a:a3:cc:91:c5:23:bf:a4:
cb:28:5d:f8:be:64:4e:ed:36:f6:76:35:cf:8b:b3:
9a:74:28:6a:2e:dc:5f:c5:4c:76:af:a2:f7:38:11:
2e:a3:67:4e:e4:09:80:23:56:8f:ce:f0:d0:cf:bc:
81:2f:6b:05:f8:43:9e:85:3b:2c:15:58:ca:34:fc:
ec:ca:01:85:b1:78:2c:c7:68:ef:5a:89:5f:2e:8b:
a4:fb:c2:7f:dd:70:f3:0e:f1:53:a6:c6:5a:f5:7c:
38:ad:c9:39:1f:57:45:46:e9:42:83:08:8d:99:3b:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:A5:93:7C:D7:5D:53:67:0C:CC:3D:7F:9A:5C:A5:9F:53:70:65
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:d6:d4:a4:7c:b9:39:1b:43:e7:05:87:43:da:fe:68:5a:
23:df:30:d1:f8:12:b2:89:c9:58:08:31:45:85:11:66:c8:9a:
71:c2:1b:6e:d0:94:54:76:26:42:48:c8:6a:fd:5c:b7:ae:88:
b6:4a:91:1e:16:1f:ea:9b:5e:c2:2a:14:0b:01:8b:ac:84:d9:
75:3c:1a:6e:de:70:da:2b:2d:18:34:8d:fd:6f:41:60:73:d7:
ca:00:ae:60:df:d6:c1:41:d1:0e:7a:81:db:c6:1e:d5:a2:5c:
e0:fa:1e:55:10:cd:78:5a:87:13:be:cc:93:17:f6:ca:cf:17:
7b:3e:4b:e6:98:d2:14:93:e5:46:1d:52:40:2a:61:f1:58:74:
bf:b1:f2:5c:a7:0c:3b:e3:01:9e:78:a0:cd:08:a8:f9:03:f7:
b8:ca:cf:bc:c1:d1:d8:2b:06:ed:71:af:a6:99:c4:3b:18:1c:
01:7c:27:8d:50:9c:10:78:12:31:95:a3:4f:51:c4:45:ba:e3:
35:48:45:d1:eb:39:15:cd:b7:f6:9d:9b:84:cf:65:78:e5:52:
cb:55:58:b8:01:4d:3d:ea:22:71:d0:47:19:f2:03:b1:92:93:
8a:c5:d2:9d:87:8e:83:90:11:74:15:7a:be:a2:24:d1:ec:ff:
9c:72:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:06 2026 by rpki-client